network-scanner-hardened
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes system binaries
nmapanddigvia a Python entry point (scripts/scan.py) to perform network discovery and hostname resolution. - [PROMPT_INJECTION]: The skill processes potentially untrusted data from network scans (IPs, hostnames, and MAC vendor strings). This surface is mitigated by explicit security guardrails that prohibit the agent from chaining scan results into remote access tools or network-facing commands.
- [DATA_EXFILTRATION]: No exfiltration patterns detected. The skill includes specific instructions to keep reconnaissance data local and requires explicit user consent before writing scan results to persistent storage.
Audit Metadata